* Matt Kettler <[EMAIL PROTECTED]> [2003-07-29 7:55am]: > At 10:39 PM 7/28/03 -0600, Alan Fullmer wrote: > >check for another instance of user_prefs somewhere on your system. > >looks like your own email is the from. some spammers like to put your > >email > >as the from so it will fool spam assassin's default setup. > > Also be sure to check to see if it matches one of the default whitelists... > there are a few present in /usr/share/spamassassin/60_whitelist.cf. > > Also be sure to check _ALL_ the headers relating to the sender, not just > "From:".. SA will look at the "Sender" "Return-Path" and "Resent-From" > headers, and a couple others to check for "from" addresses.
Thanks all, the mailing list the spammer coattailed in on was in /usr/share/spamassassin/60_whitelist.cf: whitelist_from_rcvd [EMAIL PROTECTED] securityfocus.com Thanks much! Peter ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
